Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa
File: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (raw, json)
Hash identifier: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=
Subject key identifier: F8:59:EF:42:A4:FD:98:8A:B1:8A:9B:11:A8:58:D8:B0:D4:12:94:13
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0194258F6966B1CF67F705D484971823AA41
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209768
IP address blocks: 176.105.246.0/24 maxlen: 24
2a12:5840:1f0::/48 maxlen: 48
2a12:5840:1f1::/48 maxlen: 48
2a12:5840:1f2::/48 maxlen: 48
2a12:5840:2111::/48 maxlen: 48
2a12:5840:2113::/48 maxlen: 48
2a12:5844:100::/48 maxlen: 48
2a12:5844:1141::/48 maxlen: 48
2a12:5844:1212::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:69:66:b1:cf:67:f7:05:d4:84:97:18:23:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f859ef42a4fd988ab18a9b11a858d8b0d4129413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:99:b1:76:ec:95:30:f2:af:c3:e9:b3:66:
f1:29:3b:71:22:a6:35:7e:b9:b2:8b:63:61:d2:ed:
36:83:81:12:11:72:65:94:0e:c4:cf:06:8e:18:0f:
c9:45:1d:61:51:c3:c5:ae:6f:4a:11:ca:45:00:43:
d7:dc:1f:a9:79:02:d3:56:8e:c6:5b:1d:4d:70:eb:
31:e0:cd:bd:ee:aa:4c:c6:a0:76:67:82:5d:fe:52:
58:aa:c8:df:d0:20:dc:b1:7b:1b:8d:7d:06:52:88:
a8:f7:d5:e7:8e:0d:ec:83:89:f8:6b:a1:0e:21:b8:
61:35:fe:98:5d:d4:08:bc:c4:46:ca:af:96:0f:a7:
72:b0:8a:9f:de:81:47:13:32:7a:16:61:f4:14:18:
1c:7f:ed:89:73:5b:5c:63:a7:83:e2:bf:0f:47:98:
91:46:94:3d:49:3b:50:e3:d7:24:d2:4c:5a:87:e8:
ff:38:01:7f:1a:c4:ff:5f:d7:f5:e4:2e:f7:f0:1c:
84:b6:02:16:c2:80:37:4b:89:ef:40:3b:4d:5c:00:
bc:82:6e:5b:1e:80:c1:e3:2b:f9:78:2e:68:bc:86:
3f:d5:95:1a:0c:c2:eb:11:9e:ef:cb:b2:2f:ff:d5:
07:d5:3b:91:76:a8:b9:75:3d:23:97:be:2e:08:62:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:59:EF:42:A4:FD:98:8A:B1:8A:9B:11:A8:58:D8:B0:D4:12:94:13
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.246.0/24
IPv6:
2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff
2a12:5840:2111::/48
2a12:5840:2113::/48
2a12:5844:100::/48
2a12:5844:1141::/48
2a12:5844:1212::/48
Signature Algorithm: sha256WithRSAEncryption
c7:1f:da:97:fd:77:b9:66:29:d9:31:8e:73:75:d6:be:f4:cd:
71:04:74:78:ab:e9:7a:7d:5e:87:3c:bb:09:62:6f:c2:4a:91:
aa:65:ec:cc:fe:89:51:94:fd:f8:95:20:d5:89:54:36:02:a5:
c0:ae:f7:c4:fc:5c:2d:d1:55:cb:8a:2c:0d:32:0f:c0:9b:13:
48:b5:5f:f0:8a:a7:8a:03:8c:0e:e9:a4:d6:6d:c9:b3:5c:0e:
89:4b:e6:77:4a:9e:26:cb:fb:7a:fe:c0:cf:29:59:75:b3:01:
58:6e:02:28:f1:79:1d:64:77:45:e8:03:7f:72:d6:f5:97:51:
cf:7e:2d:3d:2a:db:45:39:33:79:ea:8c:f0:5c:00:5a:2e:e2:
ed:81:c3:9f:ef:b7:0b:43:f2:2f:2a:fc:39:92:81:ba:5c:bd:
58:4a:96:87:b4:34:fb:5f:92:94:c3:00:89:0f:e4:83:75:4f:
63:8d:b9:e5:8e:40:94:ab:a0:c8:16:f5:27:df:78:1b:0e:cb:
79:36:a3:8d:bf:ca:97:8c:e1:0b:b8:b2:ca:81:bc:98:77:64:
a4:11:48:6f:c0:c1:20:b5:f0:6e:57:af:d9:6d:0d:18:ab:6e:
fd:28:2a:37:1b:45:b1:4e:14:96:e1:d7:06:3b:e2:c1:98:01:
5a:03:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:48 2025 by rpki-client